Cyber Incident Responder & Forensics Expert

Airbus S.A.S.; Damerham; Hybrid; GBP 55,000 - 75,000; Full time

Benefits offered by this job

Profit sharing

Contributory pension

Car leasing scheme

Free onsite parking

TOIL (time off in lieu)

Flexible working options

Job summary

Airbus Defence and Space is seeking an Incident Response Analyst to join our international CSIRT in Newport. You will manage the full lifecycle of security incidents, support SOC services, and contribute to threat detection improvements with automation.

In this highly technical role, you will work on complex incident handling, host forensic analysis, and the development of robust response processes. A relevant cybersecurity background and GIAC certification are advantageous.

Qualifications

• Experience managing security incidents and monitoring SOC alerts in a technical SOC/CSIRT.
• Experience performing host forensic analysis and reverse-engineering for incident response.
• Experience designing or improving security processes, threat detection use cases, and automated response capabilities.
• A practical cybersecurity background supported by a relevant degree (or equivalent) and industry certifications such as GIAC.

Responsibilities

• Investigate SOC alerts and manage the full lifecycle of security incidents.
• Support incident response in crisis mode as part of the on‑call crisis team.
• Industrialise security tooling (SIEM, EDR) and develop detection use cases.
• Design and coordinate incident response processes for SOC Level 1 and 2 with international alignment.
• Drive continuous improvement of threat detection and response capabilities.

Skills

Incident response

SOC/CSIRT

Forensic analysis

Reverse engineering

Security tooling

Education

Degree or equivalent experience in cybersecurity

GIAC certification

Tools

SIEM

EDR

Job description

Airbus Defence and Space is seeking an Incident Response Analyst to join our international CSIRT in Newport. You will manage the full lifecycle of security incidents, support SOC services, and contribute to threat detection improvements with automation.

In this highly technical role, you will work on complex incident handling, host forensic analysis, and the development of robust response processes. A relevant cybersecurity background and GIAC certification are advantageous.